A Minnesota nonprofit dental provider has agreed to settle a class action lawsuit stemming from a targeted cyberattack that exposed patient records in December 2024. The settlement covers roughly 130,583 people and offers two ways to collect cash, plus two years of free medical and credit monitoring, but only for those who act before the claim window closes on October 19, 2026. For an older reader whose Social Security number or medical history may have been swept up in the breach, the mechanics of who qualifies and how to file matter more than the headline number.
A December 2024 Cyberattack At Community Dental Care
The case, In re Community Dental Care, Case No. 62-CV-25-2490, is pending in the District Court for Ramsey County, Minnesota. It stems from a targeted cyberattack on Community Dental Care’s computer systems in December 2024, in which an unauthorized actor allegedly accessed files that may have contained names, health insurance information, dates of birth, medical information and Social Security numbers.
The settlement defines “Class Members” as individuals identified in Community Dental Care’s own records who are entitled to one or more benefits under the deal, some of whom already received a notice directly from the company describing the breach, according to the official settlement website.
Court documents place that class at approximately 130,583 people, according to a September 9, 2026 case summary from ClassAction.org, a legal-industry news service that tracks settlement filings and links to the underlying court papers. Neither the settlement’s home page nor its FAQ states that figure directly, though both describe the same class the count is drawn from.
Health-data breaches of this size also trigger federal reporting duties separate from the lawsuit itself. A covered entity that discovers a breach affecting 500 or more people must notify the U.S. Department of Health and Human Services’ Office for Civil Rights without unreasonable delay and no later than 60 days after discovery, a requirement that applies regardless of whether a lawsuit or settlement follows.
For an older reader, the exposed data raises particular risk. Social Security numbers and health-insurance identifiers are the building blocks used to file fraudulent benefit claims or divert a payment, and a stolen medical record number can leave someone else’s diagnosis or treatment history mixed into a patient’s own file. That is the practical reason the settlement pairs cash payments with monitoring coverage rather than cash alone.
Free retirement updates: Enrollment and claim windows come and go, and missing one can cost you real money. The free Retirement Shield newsletter keeps you ahead of the deadlines that matter. Sign up free.
Up To $5,000 In Documented Losses, Or A $50 Flat Payment
Class members who file a valid claim choose between two payment paths, not both. The first, called Cash Payment A, reimburses documented out-of-pocket losses tied to the breach, up to $5,000, for expenses incurred between December 20, 2024, and October 19, 2026. Covered costs include losses from identity theft or fraud, fees for credit reports or credit monitoring, charges for freezing or unfreezing credit, the cost of replacing identification documents, and postage for contacting banks, according to the settlement’s frequently asked questions page.
Claimants seeking that reimbursement must submit supporting proof, such as bank statements or receipts, showing both the amount of the loss and its connection to the breach; a claimant’s own written explanation is not enough on its own to support a claim. The second option, Cash Payment B, pays a flat $50 with no proof required at all. Filing for the $50 payment forfeits the right to also seek reimbursement under Cash Payment A, and choosing Cash Payment A forfeits the flat payment in return.
Two Years Of Medical Monitoring That Needs No Claim Form
Separate from the cash options, every class member, whether or not they file a claim, is eligible for two years of coverage from CyEx Medical Shield Complete, described in the settlement as including $1 million of medical identity-theft insurance. The service monitors for unauthorized use of a person’s health-insurance identification, misuse of a medical record number, and unauthorized spending from a health savings account, with a fraud-resolution agent available if something looks wrong.
Enrollment codes for that coverage were mailed to class members by postcard starting August 14, 2026. A class member who has lost that postcard does not need to file anything with the court; a replacement code can be requested directly from the settlement administrator, Simpluris, by phone or email.
An October 19 Deadline, A November Hearing, And An Undisclosed Fund Total
Every claim, whether filed online or mailed on paper, must be submitted or postmarked no later than October 19, 2026. Deadlines to opt out of the settlement or object to its terms fall earlier, on September 24, 2026, according to the case’s official dates page. A class member who does nothing at all is automatically bound by the settlement’s terms and gives up the right to sue Community Dental Care separately over the breach, without collecting any benefit in return.
The District Court for Ramsey County has scheduled a final approval hearing for November 23, 2026, at 11 a.m. Central time, held by Zoom, to decide whether to approve the settlement. At that hearing the court will also rule on a requested $400,000 in attorneys’ fees and litigation costs and consider $2,500 service awards for each of the eight named class representatives; both amounts would be paid by Community Dental Care rather than out of the class benefits. Settlement payments will not go out until after that hearing, and later still if anyone appeals.
Neither the settlement’s home page nor its FAQ discloses the total dollar value of the settlement fund itself. As of this writing, the documented-loss cap, the flat cash payment, the monitoring coverage, the requested attorneys’ fees and the service awards are the only dollar figures the settlement administrator has made public.
This article was produced with the assistance of AI and reviewed by The Financial Wire editorial team.
More Financial Reading
- What really happens to your joint savings account when you die?
- The ideal retirement withdrawal rate so your savings actually last
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
